Jump to content
Not connected, Your IP: 44.211.117.101
CriticalRabbit

Canvas Fingerprinting

Recommended Posts

I’m trying to find a good add-on for Firefox that will help prevent canvas fingerprinting. Does anyone have any suggestions? I’ve found this add-on https://addons.mozilla.org/en-US/firefox/addon/canvasblocker/?src=search that works but I’m hesitant to use on my main browser because it’s closed source. Does anyone know much about this add-on or trust it? It appears that Mozilla has preliminarily reviewed it though.

Share this post


Link to post

I don't have any opinion on CanvasBlocker but there are a couple of problems with it:

  • it interferes with other extensions instead of only affecting websites
  • the author makes it unnecessarily difficult to work with the code  (but it's technically open source and also free-software licensed!)

I don't use any extension to prevent canvas fingerprinting. Instead, I

  • block scripts with NoScript (canvas fingerprinting requires JavaScript)
  • use Tor Browser, which asks you whether to allow canvas image extraction (without the need to block scripts)

all of my content is released under CC-BY-SA 2.0

Share this post


Link to post

RAS / Random agent spoofer can block canvas. However in the latest version it also disables http caching to do it.

 

Ras @ git

https://github.com/dillbyrne/random-agent-spoofer/releases

 

I use it atm but only for a single desktop agent@no timer + fake screen res + fake timezone.

Then nearly everything in the 'Extra' section.

 

Its handy for when javascript is needed because all the info js can pull is moot. If anyone try's it just make sure you run a useragent and resolution that's extremely popular. -from testing so far it also spoof's the res even if ff is in full screen.

 

@sheivoko

I have no idea if this addon conflicts with other addons. Tbh I haven't looked at the code. Its only running on a machine I'm pretty 'lax' with. If you're aware of any conflicts or issues with it give a shout.

Share this post


Link to post
Guest

Also I believe Privacy Badger extension by EFF blocks this

Share this post


Link to post

I tried Privacy Badger on both Chrome and Firefox, it didn't prevent canvas fingerprinting (I used https://www.browserleaks.com/canvas to check). It's still in alpha, maybe they add such functionality later on.

Their FAQ: "The alpha release of Privacy Badger only protects you against tracking by third party sites. In the future we plan to add some privacy protections for "first party" sites that you actually visit"


all of my content is released under CC-BY-SA 2.0

Share this post


Link to post

The EasyPrivacy list might block some canvas tracking scripts but it's a static list (blocking scripts by file name / origin, not by behavior). It can't stop websites from using canvas fingerprinting techniques embedded in otherwise innocuous script files. To prove my point: My adblocker does use the EasyPrivacy list but it doesn't stop https://www.browserleaks.com/canvas


all of my content is released under CC-BY-SA 2.0

Share this post


Link to post

The EasyPrivacy list might block some canvas tracking scripts but it's a static list (blocking scripts by file name / origin, not by behavior). It can't stop websites from using canvas fingerprinting techniques embedded in otherwise innocuous script files. To prove my point: My adblocker does use the EasyPrivacy list but it doesn't stop https://www.browserleaks.com/canvas

You're right.  I've also added CanvasBlocker add-on.

Share this post


Link to post

 

I don't have any opinion on CanvasBlocker but there are a couple of problems with it:

  • it interferes with other extensions instead of only affecting websites
  • the author makes it unnecessarily difficult to work with the code  (but it's technically open source and also free-software licensed!)

I don't use any extension to prevent canvas fingerprinting. Instead, I

  • block scripts with NoScript (canvas fingerprinting requires JavaScript)
  • use Tor Browser, which asks you whether to allow canvas image extraction (without the need to block scripts)

 

what other extensions does canvasblocker interfere with?  I've begun to use it and need to know what to look out for

Share this post


Link to post

 go558a83nk:

YoutubeCenter https://github.com/kkapsner/CanvasBlocker/issues/7

Random Agent Spoofer (only if RAS is also set to block canvas) https://github.com/kkapsner/CanvasBlocker/issues/16

There shouldn't be too many other issues but I found it odd that it would affect other extensions at all. For example, using NoScript obviously doesn't stop other extensions using JavaScript internally.


all of my content is released under CC-BY-SA 2.0

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Security Check
    Play CAPTCHA Audio
    Refresh Image

×
×
  • Create New...